Data-Entry Prevention

SL-11

Where a user was about to type regulated personal data into an untrusted form and the submission was stopped. This is the point at which phishing protection becomes personal-data protection — the classification layer is what makes the distinction possible.

DischargesS.8(4)R.6 S.9

Blocked before submission, not after

Enforcement severity rises when the form requests data types mapped to regulated datasets. A generic newsletter signup and a form asking for a government identifier are treated very differently, and only a classification-aware control can tell them apart.

Submissions prevented

Users protected

Critical severity

Distinct regulated categories

What the forms asked for

Credential fields and identifier fields together — these forms are trying to harvest both an account and an identity.

Regulated categories matched

Mapped from Discovery classification, which is how the gateway knows a field labelled “reference number” is actually a government identifier.

26 prevented submissions

		Fields the form requested	Regulated categories
Citizen Services https://citzenservices.gov.in.example.io/	Rekha Saxena	Full nameDate of birthBank accountPassword	Date of birth	High	18 days ago
Document shared with you https://short.example/x9k2 → https://a.example → https://final-harvest.example	Rahul Gupta	Date of birthFull nameOTPBank account+1	Government identifierBank accountName	High	21 days ago
Beneficiary data collection survey https://forms.example-survey.net/beneficiary-data	Suresh Bhatt	Government identifierOTPFamily IDFull name	Government identifier	High	27 days ago
Beneficiary data collection survey https://forms.example-survey.net/beneficiary-data	Anil Ahluwalia	OTPFull nameDate of birthBank account+1	NameBank accountDate of birth	High	29 days ago
National Cyber Crime Reporting Portal https://cybercrime-report-portal.co.in/file	Manish Saxena	OTPPasswordFull nameDate of birth	Government identifierBank accountName	High	11 days ago
Citizen Services https://citzenservices.gov.in.example.io/	Nitin Patel	Date of birthFull nameFamily IDOTP	Name	Critical	10 days ago
Microsoft 365 sign-in https://urldefense.example.com/v3/__https://harvest.example.ru/login__	Tanvi Chopra	Bank accountFull name	NameDate of birthBank account	Critical	28 days ago
Document shared with you https://short.example/x9k2 → https://a.example → https://final-harvest.example	Aarav Rao	Family IDDate of birthFull nameGovernment identifier+1	Name	Critical	22 days ago
Beneficiary data collection survey https://forms.example-survey.net/beneficiary-data	Rajesh Mehta	Full nameGovernment identifierPasswordBank account+1	Bank accountName	High	28 days ago
National Cyber Crime Reporting Portal https://cybercrime-report-portal.co.in/file	Rahul Gupta	Bank accountFull nameFamily IDDate of birth+1	Date of birthGovernment identifierName	Medium	16 days ago
Department of Citizen Services login https://citizenservices-gov-in.secure-login.net/auth	Suresh Bhatt	Date of birthFamily IDPasswordOTP	NameDate of birthBank account	Critical	23 days ago
Document shared with you https://short.example/x9k2 → https://a.example → https://final-harvest.example	Simran Chauhan	PasswordFull nameBank accountFamily ID	Bank accountDate of birthName	Medium	10 days ago
Beneficiary data collection survey https://forms.example-survey.net/beneficiary-data	Vandana Singh	Full nameDate of birthBank accountFamily ID+1	Date of birthGovernment identifierName	High	10 days ago
National Cyber Crime Reporting Portal https://cybercrime-report-portal.co.in/file	Yash Kulkarni	OTPDate of birth	NameGovernment identifier	High	23 days ago
Microsoft 365 sign-in https://urldefense.example.com/v3/__https://harvest.example.ru/login__	Imran Khanna	Bank accountFull namePasswordDate of birth	Government identifier	Medium	27 days ago
Scholarship status https://scholarship-status-check.example.app/	Tanvi Chopra	Government identifierFamily IDBank accountFull name+1	Name	High	14 days ago
Beneficiary data collection survey https://forms.example-survey.net/beneficiary-data	Chetan Sharma	Family IDOTP	Government identifierNameDate of birth	High	yesterday
Department of Citizen Services login https://citizenservices-gov-in.secure-login.net/auth	Rajesh Mehta	Date of birthBank account	Bank accountGovernment identifierDate of birth	Critical	yesterday
Citizen Services https://citzenservices.gov.in.example.io/	Rahul Gupta	Full nameOTPGovernment identifierPassword	NameDate of birthBank account	High	13 days ago
Scholarship status https://scholarship-status-check.example.app/	Arjun Desai	OTPGovernment identifierFamily ID	NameGovernment identifier	High	23 days ago
Beneficiary data collection survey https://forms.example-survey.net/beneficiary-data	Kiran Iyer	Government identifierFamily IDPasswordDate of birth	Date of birthGovernment identifierName	High	17 days ago
Citizen Services https://citzenservices.gov.in.example.io/	Yash Kulkarni	Government identifierPasswordFull name	Bank accountDate of birth	Critical	11 days ago
Beneficiary data collection survey https://forms.example-survey.net/beneficiary-data	Tanvi Chopra	OTPFull nameDate of birthPassword+1	Government identifierDate of birthBank account	High	12 days ago
National Cyber Crime Reporting Portal https://cybercrime-report-portal.co.in/file	Rekha Saxena	Bank accountGovernment identifier	Date of birthName	Critical	25 days ago
Pension KYC verification https://pension-verification.example.biz/kyc	Rahul Gupta	Family IDBank accountPassword	Date of birthNameGovernment identifier	Critical	8 days ago

1–25 of 26

1 / 2

Evidences:S.8(4)R.6 S.9Every prevented submission is a disclosure that did not happen — and therefore a notification obligation that never arose.